---
id: CVE-2023-52588
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  f2fs: fix to tag gcing flag on page during block migration

  It needs to add missing gcing flag on page during block migration,
  in order to garantee migrated data be per…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  f2fs: fix to tag gcing flag on page during block migration

  It needs to add missing gcing flag on page during block migration,
  in order to garantee migrated data be per…
severity: high
cvss: 7.3
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H'
vendor: linux
product: linux_kernel
affected:
  - linux_kernel < 5.15.149
  - 'linux_kernel >= 5.16, < 6.1.77'
  - 'linux_kernel >= 6.2, < 6.6.16'
  - 'linux_kernel >= 6.7, < 6.7.4'
patched:
  - linux_kernel 6.7.4
published: '2024-03-06'
updated: '2026-08-04'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2023-52588'
references:
  - url: 'https://git.kernel.org/stable/c/417b8a91f4e8831cadaf85c3f15c6991c1f54dde'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/4961acdd65c956e97c1a000c82d91a8c1cdbe44b'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/7c972c89457511007dfc933814c06786905e515c'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/7ea0f29d9fd84905051be020c0df7d557e286136'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/b8094c0f1aae329b1c60a275a780d6c2c9ff7aa3'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/417b8a91f4e8831cadaf85c3f15c6991c1f54dde'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/4961acdd65c956e97c1a000c82d91a8c1cdbe44b'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/7c972c89457511007dfc933814c06786905e515c'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/7ea0f29d9fd84905051be020c0df7d557e286136'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/b8094c0f1aae329b1c60a275a780d6c2c9ff7aa3'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-52588.json
  - url: 'https://access.redhat.com/security/cve/CVE-2023-52588'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2268329'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2023-52588'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2023-52588'
  - url: >-
      https://lore.kernel.org/linux-cve-announce/2024030644-CVE-2023-52588-619a@gregkh/T
tags:
  - nvd
  - csaf
  - vex
  - red-hat
epss: 0.00256
epssPercentile: 0.17208
ingestedAt: '2026-08-05T05:58:02.728Z'
cwe:
  - CWE-20
scores:
  nvd: 7.3
  vendor: 7.1
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix to tag gcing flag on page during block migration

It needs to add missing gcing flag on page during block migration,
in order to garantee migrated data be persisted during checkpoint,
otherwise out-of-order persistency between data and node may cause
data corruption after SPOR.

Similar issue was fixed by commit 2d1fe8a86bf5 ("f2fs: fix to tag
gcing flag on page during file defragment").

## Affected

- `linux_kernel < 5.15.149`
- `linux_kernel >= 5.16, < 6.1.77`
- `linux_kernel >= 6.2, < 6.6.16`
- `linux_kernel >= 6.7, < 6.7.4`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.7.4`

## Vendor advisories

- **Red Hat VEX** · Moderate · updated 2026-10-16 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-52588.json)